Questions tagged [elasticsearch-opendistro]

An Apache 2.0-licensed distribution of Elasticsearch enhanced with enterprise security, alerting, SQL, and more. Links:

https://opendistro.github.io/for-elasticsearch

https://www.elastic.co/products/elasticsearch

This solution is provided by AWS with a "fork" of elasticsearch engine (more detail on this post)

134 questions
9
votes
2 answers

AWS Elasticsearch Kibana with Cognito - Missing role

Following this article to set up Cognito auth for AWS Elasticsearch. https://aws.amazon.com/blogs/database/get-started-with-amazon-elasticsearch-service-use-amazon-cognito-for-kibana-access-control/ Getting an error: Open Distro for…
6
votes
2 answers

In keycloak, how to redirect to an IDP with kc_idp_hint?

Here is the scene. I'm using keycloak for kibana, and I want to add two keycloak IDPs in one keycloak. When I'm using different kibana, the kibana will redirect to appropriate keycloak IDP. But now I can only redirect to the master keycloak. I know…
6
votes
1 answer

Enable xpack features on Open Distro For Elasticsearch

I'm testing ODFE (version 0.9 at the moment), and I find the lack of xpack features annoying. Would it be possible to activate some of them (the free ones of course) on ODFE ? I really appreciate the monitoring section for example, or the ILM API.…
4
votes
0 answers

Kibana OIDC Okta Integration redirecting straight to ${KIBANA_URL}/auth/openid/login with 401

I'm trying to integrate open distro ELK with OpenID Connect by following the guide here (https://opendistro.github.io/for-elasticsearch-docs/docs/security/configuration/openid-connect/#kibana-single-sign-on), specifically by updating the kibana.yml…
4
votes
1 answer

How to use trigger variables in the message of the raised alert in Kibana ElasticSearch open distro

I am using elastic search open distro.This is my trigger condition : for (int i = 0; i < ctx.results[0].hits.hits.length; i++) { if(2 < ctx.results[0].hits.hits[i]._source.responseTime) { score = true; } else { score = false; …
3
votes
1 answer

Elasticsearch index in RED health

When I run curl -X GET "elastic01:9200/_cat/indices?v" I am observing that one of my index is having value red in health I checked my cluster health and even That is in red What can be done to bring the elasticsearch index health status from red to…
shruti bidada
  • 119
  • 1
  • 2
  • 8
3
votes
1 answer

Elastic search query using python list

How do I pass a list as query string to match_phrase query? This works: {"match_phrase": {"requestParameters.bucketName": {"query": "xxx"}}}, This does not: { "match_phrase": { "requestParameters.bucketName": { …
shantanuo
  • 31,689
  • 78
  • 245
  • 403
3
votes
1 answer

kibana opendistro can't connect to ElasticSearch open distro container on Docker

I am trying to run Kibana opendistro in Elasticsearch opendistro through a docker-compose in a virtual machine in AZURE when i run the docker-compose i can access kibana on browser with : http://myipadress:5601/app/kibana but i can't for…
3
votes
0 answers

How to fix authentication finally failed (Ldap)

I'm working with opendistro and i'm using security plugin I'm using docker and im trying to connect to ldap, but i got this error: elasticsearch | [2019-07-29T10:25:14,609][WARN ][c.a.d.a.l.b.LDAPAuthorizationBackend] [922e43c02326] Unable to…
3
votes
1 answer

Open Distro Elasticsearch - Authenticate to Kibana with JWT

I could get the open distro running with basic auth (using internal user database), now I need to use JWT tokens to authenticate to Kibana dashboard. Elasticsearch config: basic_internal_auth_domain: http_enabled: false …
2
votes
0 answers

How to get keyword subfields from AWS Open Search using SQL API

Am using AWS Open Search server ,end point v1.0.0 I have created a sample table and declared the text columns with "keyword" type as below: "mappings": { "properties": { "color": { "type": "text", …
2
votes
1 answer

Overrite the default credentials(admin/admin)for opendistro for elasticsearch using docker-compose

Followed the below configuration https://opendistro.github.io/for-elasticsearch-docs/docs/install/docker/ We are able to run the docker-compose without any issues. Trying to overrite the default credentials(admin/admin) to opendistro for…
klee
  • 1,554
  • 2
  • 19
  • 31
2
votes
1 answer

How to grant access to IAM Role/User to create role inside AWS Elasticsearch?

AWS Elasticsearch fine grained access control uses Open Distro Elasticsearch security. Using this feature authorization can be handled inside the Elasticsearch.…
2
votes
1 answer

AWS Elasticsearch OpenDistro - Rollover indices not triggered

I have set up a 1-node cluster using AWS Elasticsearch service v7.10 and I've followed this OpenDistro guides to create simple index rollover policy, however the policy did not trigger at all even I waited for hours. Below is my ISM policy: PUT…
Thanh Pham
  • 203
  • 2
  • 13
2
votes
1 answer

Setting JWT authentication in Kibana Opendistro

I am trying to set up JWT authentication for Kibana in Opendistro 1.13.1, which is running on Docker. My docker-compose.yml file is: version: '3' services: odfe-node1: image: amazon/opendistro-for-elasticsearch:1.13.1 container_name:…
Potapyc
  • 21
  • 3
1
2 3
8 9